          rule])))))
 
 (defn aws-instance [name spec]
-  (let [default-sgs ["allow_outbound"]
-        default-sg-ids (map (partial id-of "aws_security_group") default-sgs)]
+  (let [default-sg-ids (map (partial id-of "aws_security_group") default-sgs)]
     (resource "aws_instance" name (-> {:tags {:Name name}
                                        :instance_type "t2.micro"
                                        :key_name "ops-terraboot"

            [clojure.pprint :refer [pprint]]))

(def account-id "12345")
(letfn [(merge-in* [a b]
          (if (map? a)
            (merge-with merge-in* a b)

                                         :user_data user_data
                                         :lifecycle { :create_before_destroy true }
                                         :key_name (get spec :key_name "ops-terraboot")
                                         :security_groups security-groups
                                         :associate_public_ip_address (or public_ip false)
                                         :root_block_device root_block_device}

